This vulnerability involves missing authorization checks in the Payrexx Payment Gateway for WooCommerce plugin (version ≤ 3.1.5). It allows an attacker with some level of privileges (low privileges required) to bypass intended access controls, potentially leading to unauthorized actions that affect data integrity. The CVSS 3.1 base score is 4.3, indicating a medium severity with network attack vector, low attack complexity, and no user interaction required.

The impact is limited to integrity as per the CVSS vector, meaning unauthorized modifications or actions could be performed due to missing authorization. There is no impact on confidentiality or availability reported. The vulnerability requires low privileges to exploit and can be triggered remotely over the network.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Until an official fix is released, review and tighten access control configurations in the Payrexx Payment Gateway for WooCommerce plugin. Monitor for vendor updates and apply patches promptly once available.